Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
File: xcymnU3Y7tz2A-NjKVsZtpAp71w.mft (raw, json)
Hash identifier: Q0a47JvwXCEyPIewXSSGwu/9IFZ7rbrD26smVn/Plbo=
Subject key identifier: A0:26:96:BF:E3:E2:7D:1E:93:14:59:4C:7C:A4:7B:5E:44:26:7A:60
Authority key identifier: C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
Certificate issuer: /CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Certificate serial: 019D28F22DC8DEE0D87403383F3F86BCBDC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 07:00:53 +0000
Manifest this update: Thu 26 Mar 2026 07:00:53 +0000
Manifest next update: Fri 27 Mar 2026 07:00:53 +0000
Files and hashes: 1: xcymnU3Y7tz2A-NjKVsZtpAp71w.crl (hash: qOrkmsc4+u7c7x8pYo7TNaxYxCaeURWvUEIFtbk9YyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:2d:c8:de:e0:d8:74:03:38:3f:3f:86:bc:bd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Validity
Not Before: Mar 26 07:00:53 2026 GMT
Not After : Mar 27 07:00:53 2026 GMT
Subject: CN=a02696bfe3e27d1e9314594c7ca47b5e44267a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f8:22:ad:32:20:94:bb:d6:12:d9:c3:e6:96:
d9:27:56:d4:41:19:48:0d:45:f4:22:f9:38:93:82:
4c:fa:6f:05:c7:68:7d:b9:df:ec:3f:fb:93:5c:38:
29:c0:9e:71:46:0f:f8:93:1d:8a:ab:eb:5a:af:f0:
c1:b6:90:f9:3b:ff:50:80:72:6a:1f:7b:76:22:46:
46:f9:24:4d:4a:ec:26:40:94:50:a8:8f:c2:66:3b:
a5:f2:cf:93:ea:db:2c:07:27:a9:aa:c4:86:0b:86:
c8:8a:2d:16:e0:f6:92:d3:7c:2d:62:d3:ec:4c:21:
88:74:45:1b:7a:1d:ec:da:0f:45:1f:8d:1f:96:d0:
08:53:49:85:72:07:de:3a:0b:ac:b0:bf:b9:84:18:
6a:07:72:f4:bc:dc:96:f5:6b:a9:b1:82:97:c2:47:
fd:73:00:7e:47:4b:43:1e:9f:39:cc:b6:0b:96:c7:
08:9c:f7:b0:42:cc:aa:75:f5:71:b0:49:09:cb:e1:
66:7e:1f:7f:fa:05:bb:81:56:27:dd:9e:aa:2c:2e:
dc:eb:b2:b5:4f:ff:e6:a4:34:c5:3d:03:c4:e5:8e:
10:3c:ed:fd:ce:bb:6f:f0:c9:35:79:63:9e:53:88:
17:71:c4:b9:81:81:25:88:b0:59:5a:65:fd:1d:81:
f4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:26:96:BF:E3:E2:7D:1E:93:14:59:4C:7C:A4:7B:5E:44:26:7A:60
X509v3 Authority Key Identifier:
keyid:C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:93:c5:2f:1d:8e:7d:2a:29:9e:74:1b:79:5f:b5:a9:02:9b:
00:ae:5a:64:ce:bb:01:5b:12:7d:8f:1c:d5:90:5b:69:2f:46:
3d:52:af:68:4e:35:68:70:23:b8:c1:5b:47:6a:10:e0:d6:96:
fc:54:d4:98:7d:18:76:94:19:32:bf:a8:e6:6a:1b:f0:1f:41:
0a:76:58:9f:cb:dc:4d:6e:0b:4c:12:3f:c9:81:95:a8:2c:5f:
01:1f:00:66:08:64:c7:51:26:ff:c3:c1:78:69:cd:f1:34:21:
ca:b5:36:95:33:ac:04:a6:52:95:f6:cc:06:bf:1f:33:cf:70:
dc:df:1b:1d:d5:bc:79:f7:16:6f:ce:e4:d9:12:92:d6:18:36:
8f:40:0b:f1:74:f6:24:46:76:29:64:7c:1e:f4:e9:e4:9d:1a:
e6:07:7f:7c:d1:6c:54:de:e5:ba:a5:e0:02:a1:da:f5:41:a2:
5f:84:66:78:d1:15:17:16:d8:2b:e0:63:a1:5d:e0:6c:50:be:
25:7c:d7:dc:cd:fd:a5:87:bb:90:72:e4:4f:75:6e:0c:54:f3:
94:d4:1d:7b:59:5f:56:e7:0d:eb:1f:1a:c6:48:b6:d0:06:e9:
d4:37:0f:fe:ec:13:d6:2b:9d:a1:f1:36:5f:35:00:2f:d5:a1:
95:80:3e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:01 2026 by rpki-client